> I changed it now to: > access to attr=userPassword > by group="cn=admin,dc=com" =wx > by group="cn=maintainer,dc=com" =wx > by self =wx > by anonymous =x > by * none stop Note that "by * none" is implicit in every rule; "stop" at the end of a rule is also implicit. Ciao, p. -- Pierangelo Masarati mailto:pierangelo.masarati@sys-net.it